Tools

gonzosint/gitrecon

OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.

0xsnowmn/cngo

Fast Golang Tool To Get Cname For Domains and Subdomain

joker25000/optiva-framework

Optiva-Framework 🔎 Web Application Scanner🕵️

mega8bit/exploit_cve-2021-29447

Go-based exploit for CVE-2021-29447 targeting WordPress 5.6.2 with PHP 8. Generates a malicious .wav payload to retrieve arbitrary files from the…

novitae/sterraxcyl

Instagram OSINT tool to export and analyse followers | following with their details

itm4n/pplcontrol

Windows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.

sham00n/buster

An advanced tool for email reconnaissance

unapibageek/ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

mrtuxx/socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to…

c3rrberu5/zerologon-to-shell

Automated exploit script combining CVE-2020-1472 (ZeroLogon) with evil-winrm to gain a remote shell on vulnerable Windows Domain Controllers.

bo0om/parampampam

Brute-force tool for discovering hidden GET and POST parameters in web applications, supporting custom wordlists and concurrent requests.

joelgmsec/kitsune

Polymorphic C2 framework with graphical interface, automatic reconnection, payload generation, and integrated hacking tools for red team operations…

jthuraisamy/dirt

Driver Initial Reconnaissance Tool

ameenmaali/wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

rhinosecuritylabs/ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

mthbernardes/leakmanager

A tool to help you manage your leaks

dump-guy/get-pdinvokeimports

PowerShell module for automatic detection of P/Invoke, Dynamic P/Invoke, and D/Invoke in .NET assemblies. Reveals unmanaged API calls, MDTokens, and…